DIIOIXI 1 / 2 



KOREAN PATENT ABSTRACTS(KR) 



Document Code: A 
(11) Publication No. 1020000072707 
(21) Application No. 1020000055323 
(51) IPC Code: 
H04L 1 2/22 



(43) Publication. Date. 20001205 
(22) Application Date. 20000920 



(71) Applicant: 
SECUVE 

(72) inventor: 
EUN. YU JIN 
HONG. Gl WAN 
HONG. Gl YUNG 
KIM, JAE MYEONG 
LEE. MIN GU 

(30) Priority: 



(54) Title of Invention 

METHOD FOR AUTOMATICALLY MONITORING INVASION AND CUTTING OFF HACKING IN REAL 
TIME 



Representative drawing 




(57) Abstract: 



PURPOSE: A method for 
automatically monitoring invasion 
and cutting off hacking in real time, 
is provided to pass hardware and 
software simultaneously performing 
the functions of invasion cutoff and 
monitoring for every packet 
information accessing to an internal 
network through an external 
information and communication 
network, so as to completely cut off 
related packet and messages. 

CONSTITUTION: A data packet 
accessed through an external 
information and communication 
network like the Internet is read 
from a packet collector. If the data 
packet is for completion, the steps 
are ended. If the data packet is not 
completed, packet filtering is 
processed for packet information 
which is a result of the packet 
reading, by referring to an invasion 
cutoff rule in an invasion cutoff rule 
storage. If the data are for invasion, 
the packet is perished. If the data 
are not for invasion, a log 
processor performs packet filtering 
log processing. Invasion monitoring 
engine decides invasion by referring 
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to an invasion pattern within 
invasion pattern database storage. Log processing of a result of invasion decision is performed to 
the log processor. If a decided result is not for invasion, packet transmission is performed, tf the 
decided result is for invasion, the invasion monitoring engine performs an invasion cutoff rule 
automatically adding packet information to an invasion cutoff rule storage. Alarm and notification 
are performed to an alarm and notification processor. The packet is perished and the first step is 
returned. 

COPYRIGHT 2001 KlPO 



if display of image is failed, press (F5) 



http://patent. kipris. or. kr/bin/Kpa_fulltext.cgi?appl_no=1 020000055323 



01-11-01 



- WIPS PIView-3:0- 



(19) □^t^ei ^^Si^(KR) 




(51) Int. CI. 

H04L ^2/Z2{^D\Sn) 



(11) S^HSis 

(43) sjmn 



^2000-0072707 
2000\312a05S. 



(21) m^^m. 

(22) m^mj\ 
(71) m^2i 



(72) ^^SX^ 



(77) ^AFS^ 



(54) 



10-2000-0055323 
2000^09^20^ 



463-500 

^^^Al ^Oie 18«iXl A|3D^^ D-217 

463-500 

^^'M ^fe^^ ?Die 221^X1 ^XUHQhM 505-104 
440-200 

^D\^ ^^M ^9}^ 881^X1 o^^EfgO^mM M04-1801 

135-081 

Aie^^Aj^y^^&Me745-10102^ 
Oi°i? 

449-910 

goiAI ^^5f£l 447 g^Omf^ 106-403 

iJXHS 
143-130 

AHe^^AI ^^21? sfgfe 9-5 



^Aiei sa&xi s 5HU »^ a^a 



XfBa^O^ LH¥A|^i]£j ^^^^ 4^ 91^ ^AlZf iJ^'l,^Xi ^ MS 6H^ X^^ x^&^^SOil ^oiCK 

o\m ^ ^'^B g^x^eAi^g,'2i m^mei^ di^h^ s^^xiai^^isi gi^i[xiey>^ s^ai^. ij^i.^x!oiixio! goje i^xi 

£2 



>^oi0j 

S^i^Xl, ^^x^B. HH^i^E-iiJ. i^^'EHa, 6HU^^X! 



SAIiAl 

Jtil2£^ ^ ^^§01 ^§£1^ UM?} ^mm^ MSSHU X^ex^e ^^xlOllAiSJ UIMo,as^x-iEI¥, SH^^S¥. nH^i^EH^xH^I^. 

iJEi^^Xloyxi^ g^xfB^^X-]S^¥. ii^iIH0DBXi^^¥, S'E.'x^B^^^§ -^SJ^. S uH idOB^ § -2^ 5.^aiXfe#. S3x-^dl¥. 

X-!14tb ^ ^^S2i S^§[Xl^X^EhxHEl¥ SMSE, 



2001/6/8 



1 



-WIPS'PIView-3.0 



?!S MEm xfSstfe ^ol /dHI:^71¥S^(D0S. Denial Of Service)* ^'X\mO\ §4^ G\0\B2\ ©gg e^a5^3^| 5h 

OI£f ^^e§^ a¥ Uie?|3^0ll SXHSFfe S^SMSJ o^:J^aII &S ¥0 Ul¥ mM¥-ia^OII SIHo^fe A|:ii{SS a 

SoPl ?I8H Mti\^ ^ U|e?ja ^±Q\\ mS^-IB S^E^a SlSSffe fi2^5lfeS msm^ 2i°U, A1til^^¥S^a a 



Oi^M e ^^SS 4f?l2} ^^g-e»lgS mmo[D\ ¥I8H 2I¥ gSSiig^S SShOI U)¥ Uje^iBS S^mfe 2^ nH^ §2011 CH8H 5Jax^3 
Zll^a SE! &II 31^8 SAIOtl ^Sotfe H/W SEfe S/W» S2}8MI 8K)i S2JS^2f SfaS uH?] S OlIAIIXI* aSSjoS X^BS.^°SM^ LH¥ 



x^&5^fe sgjiMiSJxhefl£i¥a sgjxiB^?si ai sgjimaDBoii amoi a°^2^^lx^:?^ ^'s 4= 2i2^ 5^fe sgjxfs^^sj^s ^ 

sjaifXia!xfBxH£i¥fe 2g Qioiasi iBj?:isa» 4-S5^fe iw?;!4=a¥. 4=sa 2^ m^jm saxf&ffsioii a:^y nH?JS xnaimfe M^ea' 
^i»£i¥ oi» S3}Sf 2^ w^m Q\5\o\ s^'uHeoBfi ssmcw saoi¥« gxism aa^ sgjAica ^xi» 3^ ^'aizi xf#°£ sia 

uss 4^ olfe :)1^S 4=S5ffe SSexieilxi, goij^effSiS X^So^fe SgJxJ3ffSlX-lS¥. gaUHeDB* X4gSffe SgJiWeD 
BXi§¥, IiH?JSEHi!xl£l¥Sf Sa&X|2!!5!2S ¥E12j xH£i8hfe S3xH£l¥. S! gXI ei!5!2S ¥Ei2| 3S S SeS x4£|offe 

3agissxiai¥s qisacL 

oiath e &^so)i OS ^Al^^ ssjifxi a 5H^ xp= xfB gfg« S¥S! 23011 sl7^8^o1 &^Aiioh9ii ^g8ta aa; 

nii2fe e &^soi ^ga^ ejayj s §ag<ysf3f LH¥gf Afoioii g ^^ggfsej s^j^xi §^ shd we xfeoii ^a2s. ejEi 
yi = §ss<Mo^(i)g ssKjj sEs^fe 2^ m\Ei m?iB ^aisi saexi ^ shu x\m x[&sx\{2)m :>ixi ui¥i^(7)2£ ^56^?^l am. 
^^^2} sgj&xi * 6HU Jim x^E^§xl(2)m(^lA^fe 2^ aiom uh^joii choh uis&^ oi¥B x^^l8^fe i!g,'l^xlsx^E^x^^l¥(3)^^ a 

e}a£IXK6)7t SgJxfEh??^! S SgJUHeDBB 4= 2i2^ 8ffe S gj xfB7?s| S § -Sfil xH £l¥(5) S Sej]IHeDB^§ 5ax|£l¥(6) 

s =?^&Q. s!^Jgxlsx^&hx^dl ¥(3)011 AI xiaiafe ijig^i aa ^ sa xH£| m&oii msHAife 5^^iA^u^(8)2^ s3Aitfi(9)c^i a&a^ 4- 

Site 3|^S 4-S&P. 

iii22te s ^^soi 5!¥ate MA\2i aa&xi ^ 5H?J xhs x\& sxi{2)oiiAi°j =?^Si± m ^s.m^^m UEjtiiCK a¥ mM¥-iag^xiioi¥ 

(201)8 2^ QIOIEH M^A^ jIH?J4-S¥(2O2)0ll XHSaffl, 4-Sa CilOIEH IiH?Jg IIH?;i.lEHi!xi£l¥(203)01l Si^SEK jiH^^EHgxl£l¥(2 
03)0||A]te SaxfeS^X-IS¥(205)°l ??s|Oi| c&y IiH?i£l 6H& iiH?i« W:'! xHEISH). S&MH^B S3XH£I¥(21 1 )0ll SZl'S 

as sa&xi2Mxi(204)e iHeiiasxi£i¥(203)a S3f°} 2^ qioieh dh^lis ,5!gjiiH@DBXH§¥(207)a ggjimea blino^ 

0) 3¥ l!gJ»S??s)XiS¥(205)0ll SHS ^s\m XIS ^:'^3H1 £Zlxl£l¥(211)2t saSlSaxI £l¥(21 2)0il SSiM^S SgelD S 

EJxfBSS!^§-5U¥(206)te 5jgix^B^?SJX^i.^¥(205)21 i,la!^^^^?S!0|| CH*} S! 52121 :7lsS SISmiD. SgjiIl)eDBS§ Sa¥(20 
8)te SSIIHiiOII C«e[ Mm * :)|^S HIS5}Q. a^dlX^g6(21 0)g 5^Se(209)« g8H SgJx^Bff^^§•5a S ggJIHeOB^S- 

2Ef2 ?tgg Xilg5^^. 

HI32te g &^Sa 3H§s'2S Ci^li 4'Saa. 

1. Ai>igoi Ai^^ao) sgjexi sj xfB xHEioia ssiiHiiDB s§ xiaioia i-2s :ifii saxhs^?*! xh 

£101 a 1-32S i*EK301). 

1-1. SJS^XI Si x^B xH£l» 4'S£} ^ 2S 2}CK302). 
1-2. SSiWaDB mm 5ES1 X|£1S 4^Seh ^ 2S Z>a(303). 
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B^i 2. eseixia &Bohoi(402) o^u^ 3°^ g^oi^ gsehCK403). 

3. 1(401)2J gUF^ ^CH£i g^fS^^o] SH^ §Mff S El x^B^^ XI &¥(205)U] Hj H x^&^^?3l(405)3f S^^ofOI HH^^^EI^xH 
aiM 4^SePa(404). 

4. ii^'eixi s.^BnK)j(406) ii^oi o^L|^ e^i 5^ d^ii h^oi^ iih^i§i:'im 4^iy°hq(407). 

BD\\ 5. ^ZlxHdl^(21 1)011 EH^^EI^^Zlj-iaiM 4^g°hQ(408). 

B^l 6. S^^aie!l5!(204)0l U °J HHidDBXH §[¥(207)Uj °l g ^ HH ^06(41 0)S S^^SK^I 4^St^CK409). 

7. ^3x-ia|.¥{21 1)011 iJEi&g^B^ xHB-ia 4-Se^CK4H). 

8. U^eJXI 5^B6K>1(412) S^OiS B^l 9^ ::'^:Q S'^'OI OhU2 nH^^^S 4^I^£.^[:K413). 

e^ii 9. B:?it 8(412)^ ^Bfs m^o\ s'^ois i]EJi!'Xieiisi(204)^ ^ss s'^xhBff^^x-t^^^ {205)011 xf§ ^i^fsh^ i^2Jx^Bf^ 
b:^ii 10. ss^gsx-iai¥(2i2)oii §a ^ x-iais 4^^ehcK4i5), 

B?lf 11. iSI?L!i£lPIS ^lys^Il B:^! 1^ efCK416). 

B^i 1. ^2}B^m{6)D\ ^^\x[ ^^(2io)g mB[o\ se^e-^e tJ^xi-B M^-^m Ai^''oh2>M ^mm ^:n\ 5^ 

' m^m b:^i 2^ e.niK50i). 

B^i 2- :SB^aixK6):?F ii^x^B^^ ^m^O{502). 

3. U^x^B^^'XiS¥(205)01l Ul'g[9 S' ^ x^Bf?S| (508)011 SB^£IXK8):?h ^^'xhBfi^^ X]^^m ^mmC[{503), 
B^l 4. SB^aiXK6):'F 4-^§ta(504). 

B:^I 5- S^'x^Bf?^Xi§r¥(205)011 L4IS^^ 5J S x^Bf?^ (508)^^ ¥Ei U^'xfBff^g-^I^Ig 4^g§}CK505)- 
B?ll 6. S'^x^Bf?^•S^g 4=S&^a(506). 

B^i 7. sB^aixK6)^h m^m ^^*£^a(507). 

b:>ii 1. SB^^ixKe):?^ ^#(2io)s ea^01 s^^e^e ::'^xi:zi s^nHe db m^-^m ^^m M^'om ^mm ti^m^ b:^i 5^ j[ 
^siB^e b:»ii 2^ ^^CK601). 

B^l 2. aB5^^IXK6):?^ g^IWe ei^S 4=^e[a(602). 

B:^! 3. iJ^'ime DB Xi§^¥(207)0H LHS^e S EH &!DB(608)0]| SB^aiXK6):?h gi^uHS Xi^^M ^SehCK603). 
B:i1I 4. aB^£|XK6):>f SSS ^^°^CK604). 

B:^1I 5. tJ^'ime DB X-|§^¥(205)01l m^r^ ij^'IEH§^DB(608)S ¥£H S^HH^ DB t-i:?IM ^iy°^CK605). 

b:^!! 6. g^'HH^ DB m^m ^m^L}{606). 
B^i 7. aB^e.ixKe)::'^ m^m ^^£^a(607). 

e ^^s^ ll^x^BAl:^^g2l :'i^:if g^'gxiAir^gjsi :>i^e ^^^sjeAiijo^Mj, si¥ §s#<:i]?>^e smoi ui¥ ui^?-j3^ sesfe 
ija^^s^ ^ oiiAiixia i^xio^oi ^aiz.^ x\b^^ x^b^^ =^ xii^efCK 

mE}M ^ AiHi^:>i¥g^{Dos) ^oi 2i¥^ ¥Ei2j g^oii m%'m ^ ^^011 ei^ ci^sai ^ m Mm ui¥ Air^^gjoii chsfoi 

(57) g^£| 
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2i¥ §sM<yg>^(i)# mm ui^ 




£1 see Al£6^fe qioiei m^m 



^'^m^ A\±mo{\ 9Jio\M, 



m ji\o\m 

^ MMT} m'^mx\ ^ oHIJ x^e ^^g. 
§^S2. 

JtlllS^SI tJ^'i,^XI^xFBxHE.I¥(3)0l| SiOi/d, 01IOIEH21 HH^^SM ^S5F^ IHfL! 4^S¥(202). 4^S9 HH^M S ^' x^B^^ Xi ^^¥{2 
05)^ iiSxf&^?^Oil CEfEF xHdloF^ iIH?J^ El ^ xi El ¥(203). IIH^^ E-i ^ xH El ¥(203)M ^^fah S^^HH^^Oll a\B[0\ ii ^nH§lDBX-iS¥(207)SJ 
^SnHeOBM S^^SFOj §j^01¥M e§6FII MS^ S'^A|£M 1,^X1^^ 3^ ^AI^^ X^en^ l]^'X^B7?^Xi^^¥(205)CHI 6H&f^s|e x^^^m 
^ D\^m 4^S3f^ S^^^XI 2112(204). iIH^^'ai!xHEI¥(203) §^ ^'^^Xi2!J5«(204)^ x^^\o\^ ^3xi El ¥(21 1 ). S'^^ 

Xie!i2(204)2| ^ gSM x-lEim^ ^ eSxHEI¥(212)M ^S^^ 3^^ ^AIZ.^ ^'EJ^XI ^ oHU Xfg xf& ^^g. 



3. 

XII2i^£i ^ZlxjEI¥(211)0iI ^OiAH. HHei ^ Ei xH El ¥(203)5 
eii2(204)^^¥Ei xlEte ^EjBS^3f^Zlx-|EI(41 1) §SI 
U XF§ XF&^ ^^g. 



¥Ei ^'^^ Zi\0\B m^^^ xlEI^ irH?L!^EHij^ZlxHEI(408)2J 



g^i^ 4. 

Xl!11^2j ^SxFB^^^§-^HxHEI¥(4)2f S^EHS DB^ § xH El ¥(5)011 2^01 A-j, Sei^^EI XK6):'h ^EJxF&^^Sih^k^ 
SxFB^^^e ^m, ^ Xi^^m 4^ S^lHl, lj^IIHeDBX-]S¥(207)01l U^S^^ H S IiH§!DB(608)« ^m, ^ X-l§^^^ 4 
goF^ e^SM(209) ^ ^EIXf^^(210)e ^2^^'X\ ^ oH^ X\m xfB ^^x! ^^g. 

M^m. M\2m. XMSm, M4mo\ ^^£J^1 l]\0\ ^ °eSE(Xii4£. X||5£. X-116S) 
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